Home / Privacy policy

Privacy

What we do with your information

Plain answers: what we collect, why, who else sees it, how long we keep it, and how to change your mind. Last updated October 14, 2026.

In short

  • We use the details from your request only to get back to you. We do not sell them or pass them to anyone for their own use.
  • About your child, we ask only their age. We do not ask for their name or photos.
  • Google Analytics and Meta Pixel run only after you accept them in the banner. You can change your choice at any time.
  • For anything about your data, email info@boka-academy.me.

1. Who handles your data

The data controller is Boka Academy, Kalimanjska 20, 85320 Tivat, Montenegro. For any question about your data, email info@boka-academy.me or call +382 69 336 313.

The website is maintained by Studio Piksel in Podgorica, which also runs our ads and social media on our behalf. Studio Piksel follows our instructions and does not use the data for its own purposes.

2. Waitlist requests

When you fill in a form on the site, we receive:

  • your full name, phone number and email;
  • on the form on the home page and the FAQ page, also your child's age, the start you have in mind and where you live;
  • the program you are interested in, if you opened the request from a tuition card;
  • the language and the page the request was sent from;
  • where your visit came from, for example "google.com", "facebook / instagram (link)" or "direktno" (a direct visit), so we know which channels parents actually use;
  • the moment the page was opened, so we can turn away automated requests.

Your request arrives as an email in our inbox. We do not store it in a database on the website.

Why: to call or write to you about the preschool, the after-school program or the learning center, to let you know the opening date and terms, and to arrange a visit.

Legal basis: your consent, which you give by ticking the box in the form.

Abuse protection: to stop anyone flooding the form with automated requests, we count requests per IP address within one hour. For this we keep only a one-way hash of the IP address made with a secret key, from which the address cannot be read, and old hashes are deleted automatically. Like any server, our hosting also keeps brief technical access logs (IP address, time, page, browser) for security.

3. Site visits and ads

This happens only if you click "Accept" in the banner. If you click "No, thanks", none of it loads and nothing is sent to Google or Meta.

Google Analytics 4 (Google)

Records which pages you open, where you came from, your device and browser type, and your approximate location (city, country). It also records a tap on the phone number or email, and that a request was sent, from which form and for which program. Your name, phone, email and anything else you type into the request are not sent to Google. We use the same data to measure our Google ads, and based on your visit Google may show you our ads.

Meta Pixel (Facebook and Instagram)

Records a page visit, a tap on a contact link and that a request was sent, with the program you are interested in. This is how we measure our ads on Facebook and Instagram and show them to people who have already visited the site. We do not send the name, phone or email from your request to Meta.

Legal basis: your consent.

Fonts and everything else on the site load from our own server, with no third-party services.

4. Cookies and local storage

NameSet byWhat it doesLasts
boka-consent-v2Boka Academyremembers your banner choicevalid for 180 days
boka-izvorBoka Academyremembers where your visit came from; sent only with a requestuntil you close the tab
_gaGoogletells visitors apart2 years
_ga_G4JEL121J2Googlekeeps track of the visit2 years
_gcl_au, _gcl_awGooglelink a visit to Google ads90 days
_fbpMetatells visitors apart for ads90 days
_fbcMetaremembers a click on a Facebook or Instagram ad90 days

boka-consent-v2 and boka-izvor are not cookies but entries in your browser. The first remembers your banner choice. The second remembers where you came from only while the tab is open, and is sent only with a request, if you send one; it goes to neither Google nor Meta. The others are set only with your consent, and the _gcl cookies only while we run Google ads.

The same button, "Cookie settings", sits at the bottom of every page.

5. Who receives data

We do not sell, rent or pass your request to anyone for their own use. Requests are seen only by the services the site and our email cannot run without, and only on our instructions:

  • Hostinger, which hosts the site and sends the email with your request;
  • Proton AG (Switzerland), which hosts our email inbox;
  • Studio Piksel, which maintains the site and runs our ads.

If you accept cookies, visit data (not the content of your request) also goes to Google (Google Ireland Limited) and Meta (Meta Platforms Ireland Limited). They also use it under their own terms, including for advertising, so for Meta Pixel data we are joint controllers with Meta.

Google and Meta may also process data outside Europe, including in the United States. They state that they rely on the European Commission's standard contractual clauses and the EU–U.S. Data Privacy Framework for this.

We share data with public authorities only when the law expressly requires it.

6. How long we keep it

  • Requests: until the preschool opens. If your child does not join us, we delete them no later than three months after opening, unless you ask us to keep them for the next year. If your child does join, you get a separate notice at enrollment about the records a preschool keeps by law.
  • IP hash: used only within the current hour; old hashes are deleted automatically.
  • Server access logs: briefly, under the hosting provider's rules.
  • Google Analytics: 14 months.
  • Meta: under Meta's own rules. The cookies last 90 days.
  • Your banner choice: 180 days, then we ask again.

7. Your rights

At any time you can ask us to:

  • show you what data we hold about you;
  • correct anything that is wrong;
  • delete your data;
  • limit or stop processing it;
  • give you your data in a form you can take elsewhere.

You can withdraw your consent at any time. For your request, write to us or call; for cookies, click "Cookie settings". Withdrawing does not affect what was done before.

Email info@boka-academy.me. We reply without delay, and within 15 days at the latest.

If you believe we are handling your data unlawfully, you can file a complaint with the Agency for Personal Data Protection and Free Access to Information, Bulevar Revolucije 11, Podgorica, azlp@azlp.me, www.azlp.me.

8. Children

The site is meant for parents. About your child we ask only their age, so we know which group you are interested in. We do not ask for a child's name, photos or health information through the site. We publish photos of real children only with a parent's written consent.

9. Social media

When you visit our Facebook or Instagram page, Meta processes your data under its own rules. From Meta we receive only aggregate page statistics, with nothing that identifies you, and we share responsibility for those statistics with Meta. Messages you send us there are used only to reply to you.

10. Changes

When we change how we handle data, we update this page and the date below. If a change affects the data from your request, we will let you know.

Last updated: October 14, 2026.